CVE-2024-21835

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-277 CWE-732

Affected software

No affected versions have been published.

Timeline

Published: May 16, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-218369.8A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A speciall CVE-2024-218377.3Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user CVE-2024-218385.4Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead CVE-2024-21849.8Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers(*) which may allo CVE-2024-218407.1Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and write specific file CVE-2024-218416.7Uncontrolled search path for some Intel(R) Distribution for GDB software before version 2024.0 may allow an authenticated user to potentiall CVE-2024-218436.7Uncontrolled search path for some Intel(R) Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated user CVE-2024-218444.3Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent a CVE-2024-218457.8in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.CVE-2024-218465.3An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.c CVE-2024-218483.1Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to kee CVE-2024-218497.5When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traf